Suspicious Rundll32 Invoking Inline VBScript

심각도 높음 Sigma 탐지 룰. Detects suspicious process related to rundll32 based on command line that invokes inline VBScript as seen being used by UNC2452

작성자: Florian Roth (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본